CVE-2026-12957 in Amazon Q is the third MCP auto-execution vulnerability in three AI coding tools. The pattern reveals a ...

Amazon Q vulnerability could allow attackers to steal developer cloud credentials by luring them into opening a booby-trapped ...

The flaw, which impacted Amazon, Anthropic, Google, Cursor and others, let the agent give the human false information on ...

Adversaries could plant a malicious repository that executes arbitrary code and steals cloud credentials, showcasing MCP risk.

Several AI coding assistants were tricked into facilitating developer machine hacking via an attack technique that has been ...

Wiz's 'GhostApproval' uses an old symlink trick to make six AI coding agents, from Amazon Q to Cursor, write outside the sandbox and hand over the box.

Wiz says GhostApproval abuses symlinks so AI coding agents write to SSH keys or shell startup files while showing benign ...

Six major AI coding assistants have been found to share a flaw that turns their approval prompts into a rubber stamp, letting ...

Amazon and AWS remain central to the AI infrastructure race as cloud demand, custom chips, advertising, and Prime strengthen ...

A lone threat actor used AI to orchestrate a complex attack against a large Amazon Web Services (AWS) environment and successfully extort the victim. Security and incident response firm Sygnia this ...

EDUC Q1 FY2027 earnings call recap: brand partner growth, $1.2M+ cost cuts, cash flow & margins, plus AI “Read” launch.

AI agents inside Australian businesses have access built for humans. Here's why that gap is now a top enterprise security ...